coldbraid

CVE-2010-4398 Microsoft Windows

Stack-based buffer overflow in the RtlQueryRegistryValues function in win32k.sys in Microsoft Windows allows local users to gain privileges, and bypass the User Account Control (UAC) feature.

CVSS
not scored

CWE-119

On CISA’s exploited list

Microsoft Windows Kernel Stack-Based Buffer Overflow Vulnerability

Added
2022-03-28
Federal patch deadline
2022-04-21
Ransomware use
not known

Actors known to use it (MITRE ATT&CK)